Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/TOSe0dEpW059OXyr8k_MBw11vLs.roa
File: TOSe0dEpW059OXyr8k_MBw11vLs.roa (raw, json)
Hash identifier: gXblBtqKayIFAaROQkX00Vdj/Evs6LIvpVQSI3UqMBU=
Subject key identifier: 4C:E4:9E:D1:D1:29:5B:4E:7D:39:7C:AB:F2:4F:CC:07:0D:75:BC:BB
Certificate issuer: /CN=ef9608ff9e9f48d54b209725d48f67c84875147a
Certificate serial: 019F2368FA1AF70DA3375F28FBBB7955A011
Authority key identifier: EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/TOSe0dEpW059OXyr8k_MBw11vLs.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50376
IP address blocks: 212.6.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fa:1a:f7:0d:a3:37:5f:28:fb:bb:79:55:a0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9608ff9e9f48d54b209725d48f67c84875147a
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ce49ed1d1295b4e7d397cabf24fcc070d75bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:ab:30:dd:69:b2:86:b3:ff:ca:be:80:bf:
1f:96:d9:6b:fd:82:0c:e1:7c:34:ed:bd:c6:08:da:
99:11:60:b9:4b:c2:cf:9f:92:40:26:f0:50:13:58:
b7:22:37:b8:45:10:28:00:a9:0b:9a:de:af:8d:81:
a1:b9:39:5a:30:38:48:7c:b8:7a:5e:d5:43:35:52:
0d:18:23:59:b9:57:f9:01:73:b1:78:03:de:19:53:
d5:e3:8f:1c:7d:1a:40:65:10:69:ae:36:d6:38:21:
8b:28:85:3b:1d:fc:20:8f:b0:ce:e1:4c:1d:93:ed:
b2:89:8a:64:2a:c6:52:2a:f3:27:47:35:55:d9:14:
58:e9:34:38:02:ec:59:9c:4a:f9:6e:bd:7d:a9:2b:
e9:e2:43:30:23:c9:a0:1f:18:21:95:82:b1:e6:87:
7a:b2:87:97:ce:da:56:a5:05:71:18:1f:9f:5f:23:
65:6a:59:3f:c5:d0:bb:c0:20:f8:5e:4a:61:ee:e9:
72:76:58:b4:5a:cf:6c:43:66:9b:60:db:10:76:7a:
66:1c:db:af:08:fe:2d:a5:0a:eb:92:3f:02:85:a9:
a3:e4:6a:a7:ea:f9:78:51:3f:0f:67:db:d6:c8:44:
e9:b4:8d:38:da:80:8a:9a:18:f4:28:86:51:c4:b5:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:9E:D1:D1:29:5B:4E:7D:39:7C:AB:F2:4F:CC:07:0D:75:BC:BB
X509v3 Authority Key Identifier:
keyid:EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/TOSe0dEpW059OXyr8k_MBw11vLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:90:4f:98:5b:9b:c6:ea:b3:ec:f5:6c:53:0f:c9:72:37:13:
42:6b:54:91:30:3e:78:8a:ca:97:ae:47:87:2d:81:82:9d:2d:
bb:3b:df:01:95:6a:ee:33:a3:97:4d:15:85:ac:d7:10:51:bc:
a8:e1:b4:42:65:76:bb:00:69:e6:21:75:5e:05:21:a7:78:77:
14:1e:04:71:f9:50:0f:f3:2e:28:81:c6:1c:b3:1b:e9:8b:55:
05:a0:f6:8d:bd:a6:40:39:f7:67:87:f4:e2:e7:b6:6a:a5:39:
de:2b:46:61:27:13:a5:92:cb:b3:25:e9:f2:a0:bd:e6:6a:40:
dc:96:db:1a:3e:2a:a7:02:59:a3:94:50:c6:b5:63:38:74:fb:
97:44:de:de:7f:62:61:bd:7f:bb:de:da:8a:8c:5d:1e:15:de:
0a:e2:4a:ee:32:c2:9d:df:d0:37:80:62:39:f5:59:e0:a1:fc:
42:95:b2:51:35:6d:f4:6c:aa:77:4a:be:0f:ab:f6:03:85:68:
5c:6d:a6:f3:59:ae:af:12:15:88:c3:33:63:23:5c:7b:7f:56:
84:37:88:ad:5e:10:8c:2b:bd:3c:37:3f:21:e7:73:96:fb:2e:
81:dc:68:12:3b:e3:60:4a:32:48:d2:cc:41:19:f7:d8:90:7c:
82:be:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:44 2026 by rpki-client